Questions tagged [dhcp]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
95 views

DHCP Interception

When a new client is trying to get a new IP from the DHCP server, it broadcasts the discover message. And also DHCP broadcasts the offer. And they use the transaction ID to communicate without the IP ...
0
votes
1answer
139 views

How can Ettercap act as a client instead of a gateway?

I am trying to execute an attack that requires a full-duplex MiTM position. This is the reason why I choose to use Ettercap. I have picked DHCP spoofing as the attack of choice. The problem that I ...
2
votes
1answer
61 views

What are the cons of dhcp snooping, dynamic arp inspection and ip guard?

I read about a couple of layer 2 protections against dhcp starving, mac and ip spoofing- ip guard, dhcp snooping and dynamic arp inspection. Are there any cons or vulnerabilies which enable bypassing ...
7
votes
2answers
615 views

SIEM: Monitoring End Users and DHCP IP assigning issue

I want to monitor my end users activity for which I have selected Alien Vault as my SIEM solution. Now, when I see logs coming in and I see malicious activity at a certain IP (e.g 10.10.10.4) with ...
1
vote
1answer
324 views

dhclient cloud-init /var/tmp process

There's a process that's running that I'm trying to investigate why its running and what its doing. The server is a Linux Ubuntu server running on AWS. Running 16.04. The process in question is: ...
1
vote
2answers
87 views

Security of using DHCP and non-standard ports for medical devices

I recently came across this comment written in a journal article. Lastly, medical apparatus are expected to use Dynamic Host Configuration Protocol (DHCP) for the allocation of their IP ...
2
votes
3answers
1k views

Is HTTPS over wifi still safe if a hacker can set up a rogue DHCP server?

I always heard that entering passwords or any sensitive information while using a public wifi spot is safe only when visiting an HTTPS website, ensuring that the URI and certificate are valid. Many ...
0
votes
1answer
3k views

Can't connect to fake AP with airbase-ng

I use kali-rolling on a virutal machine and I try to set up a fake access point using airbase-ng, but my devices won't connect to it whatsoever. My steps are: I put my wirless adapter in monitor mode ...
2
votes
0answers
265 views

How to prevent a DHCP Starvation attack in a wireless network

Is there any way to prevent a DHCP Starvation attack when using a wireless network with anonymous users? Port security cannot be used since maxing the number of clients that can connect on a port ...
0
votes
1answer
516 views

How DHCP client can determine that 802.1x Port based authentication has been completed and its time to trigger DHCP discover

I have a Supplicant running on 1 Linux box attached with a Free radius server on other linux box with cisco catalyst switch (with 802.1x Port based access) in between. Now I have been able to ...
0
votes
1answer
650 views

Do ISP’s in America keep IP assignment logs forever? [closed]

I read that the majority of ISP’s keep theirs for at least 180 days. However, does anyone know how long charter spectrum keeps theirs? Do ISP’s retain their logs forever even if they are using a DHCP ...
0
votes
1answer
75 views

Would it be possible for a malicious user to change the LAN IP address of an uncompromised device?

I have a local network and an IPCam (with its own storage) in it. Due to some practical limitations, I cannot use technologies such as AP isolation or VLAN to isolate low-integrity and high-integrity ...
5
votes
2answers
3k views

Why is DHCP considered insecure?

Most places I've worked at consider DHCP to be a bad idea for management networks, or "secured" networks. I'm curious as to why that is. Consider this scenario... There is an ISCSI storage network,...
16
votes
4answers
52k views

Detecting(and locating) rogue DHCP server on a local area network

How would we detect and locate a rogue DHCP server on our local area network?
2
votes
1answer
907 views

DHCP Starvation attack

The client and the DHCP server exchange four messages (Discover, Offer, Request and Acknowledge) before reaching agreement on leasing a certain IP address for a certain time. On the other hand, the ...
-5
votes
1answer
521 views

IP address obfuscation [closed]

IP address obfuscation is a well known approach (for example, MLA Kewley, Dorene, et al. "Dynamic approaches to thwart adversary intelligence gathering.") The approach suggested, is mainly used in ...
-4
votes
1answer
545 views

How does resolv.conf work? [closed]

Can someone try explaining (in simple terms) how Wi-Fi routers push nameservers and routes to my resolv.conf? I've noticed it gets changed automatically as I move between different Wi-Fi networks. I ...
1
vote
0answers
1k views

Creating a rogue AP with Kali Linux

so i have for the last 2 days going through this task of setting up a Rogue AP on my Kali linux running in my VM.... i am using the 64bit version and the wifi adapter is TP link TL WN722N, so my ...
3
votes
3answers
2k views

Is SSL/TLS pointless for IRC?

Assuming a network which has absolutely no support for SSL/TLS, as rationalised by this blog post, is it possible guarantee the security of privileged operator connections? There are already ...
5
votes
1answer
244 views

What is the simplest way to prevent adding a new default route via dhcp?

I have a corporate network to which remote access is provided via openvpn. Customers include a variety of devices (laptops, smartphones). These devices running software that accesses corporate ...
0
votes
1answer
4k views

Android devices are unable to connect to Rogue Acces point created using Airbase-ng

I have created a rogue access point using airbase-ng, but I can't connect to it using my android phones (note II, S4), when I tap on the access point all I get is: Obtaining IP address...', than ...
3
votes
5answers
13k views

Stopping users from spoofing an IP

I have a MikroTik router (that has firewall and scripting capabilities) that is acting as a DHCP server for the 192.168.1.0/24 subnet. Is there any way I can stop it from passing traffic from a user ...
4
votes
1answer
611 views

DHCP Starvation Attack doesn't work in my virtual lab

I've installed DHCP server in VirtualBox host-only network type. Other clients in VirtualBox can get their IP addresses successfully from my DHCP server. I've decided to attack this DHCP server and ...
3
votes
2answers
4k views

What is the role of ARP poisoning when doing a DHCP spoofing attack

My Current Background on the topic DHCP Spoofing is done by a rogue DHCP server on the network which replies to DHCP requests from hosts(Attacker can run a DHCP starvation attack on the legitimate ...
0
votes
1answer
50 views

Setting Up My first network Labs? [closed]

so i'm a complete newbie to this field, but i'm using this book - 'Metasploit The peentration Tester's Guide' - by David Kennedy, etc. I'm attempting to set up the virtual labs needed in order to ...
2
votes
2answers
381 views

Is DHCP spoofing ever possible on VMware?

So I've just watched this Defcon video:https://www.youtube.com/watch?v=RaA5dEIqzzQ&t=1583s. Apparently they were able to set up a rouge DHCP server and get a 50/50 chance of sending the victim the ...
4
votes
3answers
324 views

How should I respond to an unrecognized client in my DHCP logs?

I've found a strange hostname in my dhcpd.leases file and I'm wondering what steps I should take in response. I have a simple home network: my modem is plugged into a router running OpenBSD 6.0, and ...
2
votes
1answer
157 views

Can someone be connected to a router but not be in the DHCP table of a router [closed]

First I would like to say that I didn't know how to format the proper title but below is the issue. I have a router that connects to the ISP but in this router there X people connected, i know all ...
4
votes
1answer
353 views

Cant access most websites using a fake AP created by aircrack-ng suite

The question , Setting up a fake AP - problem with iptables and DNS server , I posted before was answered and fixed, to not confuse people looking for the same problem in the future I wanted to post a ...
0
votes
2answers
845 views

RaspberryPi3 wont show fake AP created by Airbase-ng

Im using Aircrack-ng suite to apply an evil-twin attack with my RaspberryPi3 operated by Kali-linux on another RspberryPi3 with Raspbian Jessie. The steps are as followed: 1.configuring the apache2 ...
4
votes
1answer
484 views

What are the security risks of using public address schemes for the DHCP of your VPN'd Users?

At the company I work for we recently purchased a network scanning tool to help with asset inventory and overall PC network management. My supervisor, while looking at the different IP address ranges ...
3
votes
1answer
507 views

How can I launch DHCP starvation attack in WLAN?

In WLAN, due to MAC association on Access Point (AP), I can't send the DHCPDISCOVER messages using random MAC addresses. But if I keep my original MAC address as the source ethernet MAC a and random ...
10
votes
7answers
3k views

How can I restrict access to network data by an unauthorized computer that connects via Ethernet?

I assume I can configure most routers to only assign IP addresses to specific MAC addresses, as is possible with wireless routers. However what if a computer is connected via Ethernet and does not ...
0
votes
1answer
312 views

DHCPig not making the hosts discard IP configuration

In DHCPig I have the option to send RELEASE packets to all hosts in the network. This should result in the hosts discarding their configuration. This is the command I ran: pig.py -r eth0 I did run ...
1
vote
1answer
214 views

Secure DHCP, DNS, Active Directory Server

Are there any common vulnerabilities when creating a DHCP,DNS, and Active Directory server that should be addressed immediately? The operating System is Windows Server 2012 R2 64-bit.
1
vote
1answer
126 views

Nemesis packets not detected in wireshark/tcpdump

I have been using nemesis for forging fake DHCP request packets on my Ubuntu machine. I get a "packet injected" message each time I inject it. However I was not able to analyze it on wireshark as my ...
8
votes
4answers
10k views

What are the biggest security concerns on PXE?

What are the top security concerns when setting up a PXE (Preboot Execution Environment) booting environment, ordered by severity of a possible exploitation? Things that I thought of are (in no ...
1
vote
1answer
490 views

Yersinia raw packet

I'm using Yersinia to pentest my network. There are two options send raw packet and creating DHCP rogue server I don't understand fully. Can someone explain the meaning of these options?
2
votes
0answers
494 views

ArpON not working

i'm trying to setup ArpON on my laptop running Ubuntu 14.04. I have a DHCP network so in the configuration i uncommented the DARPI line, then set RUN to yes. Then i started the daemon with sudo ...
1
vote
1answer
539 views

DHCP Exhaustiation / Rogue DHCP interrupted by real DHCP NACK

I was trying to run a Rogue DHCP Server which should cause a MITM attack. I did the following Exhaust the real DHCP Server using DHCPig (worked) Run a Rogue DHCP Server using the auxiliary/server/...
0
votes
2answers
496 views

PXE TFTP Vulnerabilities

I am planning to implement diskless clients for booting Windows 7 clients. I am trying to determine whether to use PXE with TFTP or iPXE with HTTPS or iSCSI. Are there any vulnerabilities with using ...
3
votes
1answer
811 views

Is it possible to intercept traffic by using a WAN facing DHCP server on an ISPs cable network?

I am running pfSense on an edge firewall conncted to a cable line. I can see many DHCP requests hitting my firewall. I guess this requests are getting send by cable modems currently booting up and ...
2
votes
3answers
1k views

How can I set up DHCP so that domain devices get a certain block of IP addresses and other non-domain devices get a separate block?

Is there a way for me to set up DHCP so that only domain devices get an IP Address from a certain subnet, say 192.168.12.x, and other non-domain devices would be assigned to a different subnet? Edit: ...
1
vote
1answer
3k views

shellshock dhcp exploitation

An attacker can exploit the bash bug in the DHCP protocol. On searching , how this can be performed , I found "http://www.sectechno.com/2014/09/28/shellshock-dhcp-server-exploitation/" , but could ...
1
vote
2answers
1k views

How does DHCP starvation work? How to prevent it?

Is it the same as DHCP exhaustion? Can LANs be vulnerable to such attacks or it's against WiFi only?
9
votes
2answers
3k views

Is connecting to an open WiFi router with DHCP in Linux susceptible to Shellshock?

Source: http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html For the same reason, userland DHCP clients that invoke configuration scripts and use variables to pass down ...
2
votes
1answer
10k views

How to prevent DHCP Starvation attack?

All this while, I assumed that switchport security is enough to prevent DHCP dos attack. If I set it maximum 1, there can be no more mac addresses packets. But, a friend told me that using the tool, ...
7
votes
4answers
27k views

What are the laws regarding ISP recording IP addresses? How would they know who had which?

Since most internet users have ISPs using dynamic IP addresses (e.g. someone gets a new external IP address every few days) are there any laws requiring the ISPs to keep logs associating an IP address ...
20
votes
4answers
32k views

DHCP vs. Static IP Addressing

How do DHCP and Static IP addressing compare, from a security standpoint? What are the risks/benefits associated with each? I know the preferred solution between the two will vary with network size ...
-3
votes
2answers
1k views

How do cellphones discover wireless APs? [closed]

I'm trying to find some information on how cellphones discover which wireless networks are in range? Is it via ARP or DHCP discover? Also how often does a cellphone do this polling? I can't find any ...